Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/1-W_xiLX9dxgV6poOL5OSAI6inmM.roa
File: 1-W_xiLX9dxgV6poOL5OSAI6inmM.roa (raw, json)
Hash identifier: 3ymfcvZWvjDntXiGFZ/+MAotNVF2vKVnnGUMc4DWo9I=
Subject key identifier: F9:6F:F1:88:B5:FD:77:18:15:EA:9A:0E:2F:93:92:00:8E:A2:9E:63
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 05275EB5
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/1-W_xiLX9dxgV6poOL5OSAI6inmM.roa
Signing time: Sat 01 Jan 2022 10:58:36 +0000
ROA not before: Sat 01 Jan 2022 10:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213245
IP address blocks: 185.19.82.0/24 maxlen: 24
185.215.46.0/24 maxlen: 24
185.215.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86466229 (0x5275eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jan 1 10:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f96ff188b5fd771815ea9a0e2f9392008ea29e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:d7:4d:b2:2d:9b:e2:cc:b8:3d:00:21:26:
82:cb:3f:6a:67:0a:92:80:3d:5f:a8:54:34:90:c4:
b6:34:4f:9e:6d:21:fa:f1:17:87:ac:49:51:62:80:
45:77:5c:6e:fe:49:8e:39:f6:34:98:b2:de:1e:93:
e6:de:ff:53:b1:5a:a1:b9:98:54:bb:6c:e1:53:a2:
1a:c7:da:8f:b8:37:62:b8:7b:19:54:59:42:45:52:
ad:7a:d9:6d:bc:0a:a2:cb:f4:09:5f:f1:c2:1a:cf:
3f:15:d0:b5:08:1f:cf:90:73:36:ea:60:b7:f3:7b:
57:1a:ab:8d:3b:4e:d3:83:ff:d3:96:06:ac:e7:69:
94:6e:ec:70:b1:be:88:b5:23:4c:d3:90:11:32:12:
f2:50:4a:3c:67:a3:e4:1d:56:d0:55:99:a6:f0:4c:
52:2e:e1:a8:80:5a:11:4b:c1:4c:e9:f3:c1:22:a4:
41:6d:f5:82:bb:ff:bf:42:01:ed:b5:db:48:81:ca:
b4:cb:fb:15:18:1b:0d:c9:1d:9c:06:0e:e5:3c:1f:
29:58:23:67:db:58:42:b7:a4:1b:8a:4b:2c:4a:47:
25:64:45:b0:50:eb:2b:89:74:7e:20:cc:22:e1:64:
28:fe:3d:b3:1e:18:f9:b8:21:98:fe:bc:f0:a5:94:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6F:F1:88:B5:FD:77:18:15:EA:9A:0E:2F:93:92:00:8E:A2:9E:63
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/1-W_xiLX9dxgV6poOL5OSAI6inmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.82.0/24
185.215.45.0-185.215.46.255
Signature Algorithm: sha256WithRSAEncryption
18:3e:38:58:36:1a:f7:ba:68:bb:d8:fa:b3:f4:dd:b6:3c:84:
50:a3:42:f7:65:ed:66:2c:a5:4a:78:95:87:a1:70:7c:81:d1:
bb:ca:4c:a3:1a:c8:e0:cb:7f:c9:5d:f0:15:e5:32:ae:20:b4:
d3:df:0c:3c:1d:d0:1a:50:9e:f0:7a:fe:3b:aa:e6:90:6d:2c:
4e:02:99:e2:90:d5:11:44:81:d7:89:dd:71:af:16:a2:e1:6e:
a8:3d:68:d1:32:dc:a9:ee:ac:ea:16:35:b2:c9:41:55:5f:44:
6b:3c:7b:63:b6:9b:27:41:3c:86:41:22:06:46:8d:e7:ba:bb:
4a:5a:1e:55:e7:f3:6c:3b:33:26:83:79:40:b1:0e:d2:74:c5:
df:f3:f7:0f:4e:83:5a:76:ad:56:8d:9b:cf:85:14:72:9d:09:
50:48:13:f7:48:bc:ba:f7:64:4c:f0:51:36:2c:dd:d2:fd:08:
3f:05:27:6b:a2:36:6a:b0:f3:47:18:5b:a0:46:5c:8c:55:88:
71:2e:4d:cf:18:03:53:ff:f0:43:5e:cb:82:cf:74:58:4c:f9:
4b:1c:88:98:9d:a1:d1:99:38:96:78:90:fa:14:1f:5b:c4:4e:
2f:97:e1:d5:d4:fd:a6:94:3d:22:b0:6f:22:a3:11:de:2e:df:
41:6b:30:f6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBSdetTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZGE0ZTk1ZDJmNGNjMzRhNzM3NmI3M2MwZjAzOWIzZTE1OGY1MTUyMB4XDTIyMDEw
MTEwNTgzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjk2ZmYxODhiNWZk
NzcxODE1ZWE5YTBlMmY5MzkyMDA4ZWEyOWU2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL7/102yLZvizLg9ACEmgss/amcKkoA9X6hUNJDEtjRPnm0h
+vEXh6xJUWKARXdcbv5Jjjn2NJiy3h6T5t7/U7FaobmYVLts4VOiGsfaj7g3Yrh7
GVRZQkVSrXrZbbwKosv0CV/xwhrPPxXQtQgfz5BzNupgt/N7VxqrjTtO04P/05YG
rOdplG7scLG+iLUjTNOQETIS8lBKPGej5B1W0FWZpvBMUi7hqIBaEUvBTOnzwSKk
QW31grv/v0IB7bXbSIHKtMv7FRgbDckdnAYO5TwfKVgjZ9tYQrekG4pLLEpHJWRF
sFDrK4l0fiDMIuFkKP49sx4Y+bghmP688KWUhnECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBT5b/GItf13GBXqmg4vk5IAjqKeYzAfBgNVHSMEGDAWgBSdpOldL0zDSnN2
tzwPA5s+FY9RUjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25hVHBYUzlNdzBwemRyYzhEd09iUGhXUFVWSS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvYWNmMmEyLTRkNTItNDBjZC1hNWY4LTU5NTkxMzg5ZTI0Mi8x
LzEtV194aUxYOWR4Z1Y2cG9PTDVPU0FJNmlubU0ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIw
L2FjZjJhMi00ZDUyLTQwY2QtYTVmOC01OTU5MTM4OWUyNDIvMS9uYVRwWFM5TXcw
cHpkcmM4RHdPYlBoV1BVVkkuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
LQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQDBAC5E1IwDAMEALnXLQMEALnXLjAN
BgkqhkiG9w0BAQsFAAOCAQEAGD44WDYa97pou9j6s/TdtjyEUKNC92XtZiylSniV
h6FwfIHRu8pMoxrI4Mt/yV3wFeUyriC0098MPB3QGlCe8Hr+O6rmkG0sTgKZ4pDV
EUSB14ndca8WouFuqD1o0TLcqe6s6hY1sslBVV9Eazx7Y7abJ0E8hkEiBkaN57q7
SloeVefzbDszJoN5QLEO0nTF3/P3D06DWnatVo2bz4UUcp0JUEgT90i8uvdkTPBR
Nizd0v0IPwUna6I2arDzRxhboEZcjFWIcS5NzxgDU//wQ17Lgs90WEz5SxyImJ2h
0Zk4lniQ+hQfW8ROL5fh1dT9ppQ9IrBvIqMR3i7fQWsw9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org